RT3425: constant-time evp_enc
authorEmilia Kasper <emilia@openssl.org>
Fri, 5 Sep 2014 12:47:33 +0000 (14:47 +0200)
committerEmilia Kasper <emilia@openssl.org>
Wed, 24 Sep 2014 14:25:04 +0000 (16:25 +0200)
commit738911cde68b2b3706e502cf8daf5b14738f2f42
tree9f15ed2e4597ca729a5c4a7bb8a66aa8f4b0f291
parente1080ea3c7fe67ea19e77a759b498bc62f99b263
RT3425: constant-time evp_enc

Do the final padding check in EVP_DecryptFinal_ex in constant time to
avoid a timing leak from padding failure.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 4aac102f75b517bdb56b1bcfd0a856052d559f6e)

Conflicts:
crypto/evp/evp_enc.c
crypto/evp/Makefile
crypto/evp/evp_enc.c